Extracted

• • Target

    3300566fc05d714abb32bad90f37290e232cafc50709b7fb4c828c911d6e1b9a

  • Size

    349KB

  • MD5

    59024427b1d83a475e33157c41aa8048

  • SHA1

    e69ddf03cb1a72b5b6cfd07677fff2550b506077

  • SHA256

    3300566fc05d714abb32bad90f37290e232cafc50709b7fb4c828c911d6e1b9a

  • SHA512

    f14e0c6c18ff8115156467621243aaefef6253dbede47747696029b433daa0bc2ddc420d0aebf2ca7394759a710b667e2fd18c5044d57c1a5476cc38f8bef40b

  • SSDEEP

    6144:xgqFVwCVJ4MzpHA7gc3sjYhIcwkoy6eZnBiSaL5X28mQ399ydab204VRJ:ZVwsm4pg7gcsYIFeVBiSaMKer04R

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2